agentprime: CWE-15

CVE-2026-13292: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability

Wed, 04 Nov 2026 20:24:54 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121614: Docker Sandboxes host Git executes repository-controlled programs

Tue, 03 Nov 2026 21:54:58 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121427: AzuraCast through 0.23.8 Config Injection via frontend_config.custom_config

Tue, 03 Nov 2026 14:28:22 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-68403: Inadequate Steps to Confirm Vulnerability in QuRouter

Thu, 15 Oct 2026 06:58:16 GMT

CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110845: n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation

Wed, 14 Oct 2026 22:52:20 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-96188: Microsoft PowerToys Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 19:01:15 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73027: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 19:00:45 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-96218: Windows Update Stack Tampering Vulnerability

Tue, 13 Oct 2026 19:00:31 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107818: MariaDB: environment injection via wsrep bootstrap in the mariadb.service file

Fri, 09 Oct 2026 17:23:58 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107503: Origin validation error in Eclipse Ditto Ditto Explorer UI

Thu, 08 Oct 2026 09:32:47 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-94577: Brocade Fabric OS: A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI)…

Thu, 08 Oct 2026 04:18:30 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105294: Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfig

Mon, 05 Oct 2026 00:44:19 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103442: MergeAccount PHP object injection via session-key substitution

Wed, 30 Sep 2026 16:09:40 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54918: NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CI

Thu, 17 Sep 2026 20:03:08 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-87987: An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable assignments preceding allowlisted commands.

Fri, 11 Sep 2026 14:34:01 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85217: Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop

Thu, 10 Sep 2026 13:29:58 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-13745: Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME

Thu, 10 Sep 2026 08:33:09 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19592: OpenAI Codex CLI: OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS…

Tue, 01 Sep 2026 17:14:49 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19593: OpenAI Codex Desktop: OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and…

Tue, 01 Sep 2026 17:10:24 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-16708: IBM Db2 Mirror for i is affected by multiple vulnerabilities

Fri, 14 Aug 2026 19:17:21 GMT

CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19884: Eclipse Foundation Eclipse Theia: In Eclipse Theia versions up to and including 1.69.0…

Fri, 14 Aug 2026 15:32:38 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73661: FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup

Thu, 13 Aug 2026 21:25:26 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-56567: HCL iControl is affected by multiple security vulnerabilities.

Fri, 31 Jul 2026 14:52:27 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46485: Dash: Users can write to config despire permissions (OIDC tested)

Wed, 15 Jul 2026 18:08:48 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-44768: Security misconfiguration in SAP CRM (WebClient UI)

Tue, 14 Jul 2026 00:20:48 GMT

CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

ouroboros-ai: Incomplete fix of CVE-2026-47211: untrusted project .env can still reach RCE via omitted execution-routing keys

Fri, 19 Jun 2026 15:12:25 GMT

ouroboros-ai <0.42.1, fixed in 0.42.1. CVSS 8.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-0418: Certain NETGEAR devices allow administrators to tamper with system

Tue, 09 Jun 2026 15:50:50 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-46399: Authenticated Remote Code Execution via File Overwrite

Fri, 05 Jun 2026 18:13:15 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-1784: Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection

Tue, 02 Jun 2026 07:22:26 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-25716: Dräger Infinity Delta/Kappa Patient Monitor DoS via Malformed Network Packet

Mon, 01 Jun 2026 21:15:07 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Apache CXF: Untrusted JMS configuration can lead to RCE

Tue, 26 May 2026 13:30:15 GMT

org.apache.cxf:cxf-rt-transports-jms >=4.2.0, <4.2.1 || >=4.1.0, <4.1.6 || <3.6.11, fixed in 4.2.1, 4.1.6, 3.6.11. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false

Wed, 13 May 2026 15:29:56 GMT

github.com/traefik/traefik <=1.7.34, no fixed version yet. CVSS 6.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via `found-action`

Tue, 12 May 2026 15:07:59 GMT

github.com/hahwul/dalfox/v2 <2.13.0, fixed in 2.13.0. CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-41489: Pi-hole: Local privilege escalation via config-controlled path in root-executed service hooks

Mon, 11 May 2026 20:21:38 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests

Sat, 25 Apr 2026 23:50:10 GMT

openclaw >=2026.4.5, <2026.4.20, fixed in 2026.4.20. CVSS 4.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution

Wed, 22 Apr 2026 14:44:13 GMT

github.com/rclone/rclone >=1.45.0, <1.73.5, fixed in 1.73.5. CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. CVSS score 9.2 (7.0 or more) and EPSS 0.33 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Workspace .env could inject OpenClaw runtime-control variables

Fri, 17 Apr 2026 21:56:12 GMT

openclaw <2026.4.9, fixed in 2026.4.9. CVSS 7.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-0232: Cortex XDR Agent: Local Administrator can disable the agent on Windows

Mon, 13 Apr 2026 07:22:48 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-33092: Local privilege escalation due to improper handling of environment variables.

Fri, 10 Apr 2026 13:17:45 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

Spring Cloud Gateway's SSL bundle configuration silently bypassed

Fri, 10 Apr 2026 09:31:15 GMT

org.springframework.cloud:spring-cloud-gateway >=4.2.0, <4.2.1, fixed in 4.2.1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-30817: Arbitrary File Reading Vulnerability in dnsmasq Module in TP-Link AX53

Wed, 08 Apr 2026 17:53:58 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-30816: Arbitrary File Reading Vulnerability in OpenVPN Module in TP-Link AX53

Wed, 08 Apr 2026 17:53:20 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

OpenClaw Has Incomplete Fix for CVE-2026-4039: CLI Backend Environment Variable Injection via Workspace Config

Tue, 07 Apr 2026 18:10:52 GMT

openclaw <2026.3.24, fixed in 2026.3.24. CVSS 8.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Workspace `.env` can override the bundled plugin trust root

Fri, 03 Apr 2026 02:47:57 GMT

openclaw <2026.3.31, fixed in 2026.3.31. CVSS 8.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw: Workspace `.env` can override the bundled hooks root and load attacker hook code

Thu, 02 Apr 2026 21:00:16 GMT

openclaw <2026.3.31, fixed in 2026.3.31. CVSS 8.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw has a CWD `.env` environment variable injection which bypasses host-env policy and allows config takeover

Wed, 01 Apr 2026 00:02:42 GMT

openclaw <2026.3.28, fixed in 2026.3.28. CVSS 8.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw has Inconsistent Host Exec Environment Override Sanitization

Thu, 26 Mar 2026 19:51:12 GMT

openclaw <2026.3.22, fixed in 2026.3.22. CVSS 7.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenClaw's `system.run` env override filtering allowed dangerous helper-command pivots

Mon, 09 Mar 2026 19:52:59 GMT

openclaw <2026.3.7, fixed in 2026.3.7. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-21422: Dell PowerScale OneFS: Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0…

Wed, 04 Mar 2026 12:57:38 GMT

CVSS 3.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.

OpenClaw's shell startup env injection bypasses system.run allowlist intent (RCE class)

Tue, 03 Mar 2026 22:12:51 GMT

openclaw <2026.2.22, fixed in 2026.2.22. CVSS 7.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.